From 48f0fe55402768b467d5ac2ee5ec5502718c6c94 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 8 Mar 2023 20:20:35 +0100 Subject: [PATCH] Bump step-security/harden-runner from 2.1.0 to 2.2.0 (#327) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.1.0 to 2.2.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/18bf8ad2ca49c14cbb28b91346d626ccfb00c518...c8454efe5d0bdefd25384362fe217428ca277d57) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/docker.yml | 2 +- .github/workflows/docs.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/static-analysis.yml | 2 +- .github/workflows/terraform-lint.yml | 2 +- .github/workflows/test.yml | 4 ++-- 6 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 2fc8d10f..acbf19fb 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -20,7 +20,7 @@ jobs: packages: write steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 2010f11d..a023d80a 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e56a65ba..33b17775 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -19,7 +19,7 @@ jobs: contents: write steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml index 9eacd3f0..b201fa16 100644 --- a/.github/workflows/static-analysis.yml +++ b/.github/workflows/static-analysis.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/terraform-lint.yml b/.github/workflows/terraform-lint.yml index c3003681..84b22985 100644 --- a/.github/workflows/terraform-lint.yml +++ b/.github/workflows/terraform-lint.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 # tag:v2.1.0 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # tag:v2.2.0 with: egress-policy: audit diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 485df3f0..ad8593d4 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: egress-policy: block allowed-endpoints: @@ -38,7 +38,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: egress-policy: block allowed-endpoints: